Discussion:
package repository on babyname.tips?
(too old to reply)
Michael Kallweitt
2017-12-12 13:26:57 UTC
Permalink
A few minutes ago, I updated my TexLive distro using "sudo tlmgr update
-self -all", when I noticed that something came in through a repository
(verified, though) that looks a little suspicious, "babyname.tips".

Can anyone confirm that this is a legitimate repo?

,----
| tlmgr: package repository http://ftp.uni-erlangen.de/ctan/systems/texlive/tlnet (verified)
| tlmgr: saving backups to /usr/local/texlive/2017/tlpkg/backups
| [1/1, ??:??/??:??] update: texlive.infra [372k] (45888 -> 46048) ... done
| Restarting tlmgr to complete update ...
| tlmgr: package repository http://babyname.tips/mirrors/ctan/systems/texlive/tlnet (verified)
| tlmgr: saving backups to /usr/local/texlive/2017/tlpkg/backups
| [1/1, ??:??/??:??] update: texlive-scripts [118k] (45974 -> 46030) ... done
| running mktexlsr ...
| done running mktexlsr.
| running mtxrun --generate ...
| done running mtxrun --generate.
| tlmgr: package log updated: /usr/local/texlive/2017/texmf-var/web2c/tlmgr.log
`----
--
www.wasfuereintheater.com - Neue Theaterprojekte im Ruhrpott
»DAS UNBEKANNTE SCHÖN ZU FINDEN. DEM UNVERSTANDENEN MIT WÄRME ZU
BEGEGNEN. DAS IST WAHRE LIEBE« Barbara Bollwahn, http://ow.ly/Xk52L
Denis Bitouzé
2017-12-12 18:27:30 UTC
Permalink
Post by Michael Kallweitt
A few minutes ago, I updated my TexLive distro using "sudo tlmgr update
-self -all", when I noticed that something came in through a repository
(verified, though) that looks a little suspicious, "babyname.tips".
Can anyone confirm that this is a legitimate repo?
I can't answer this question but I always specify the repository (in
order to avoid some slow ones around):

┌────
│ tlmgr update --self --all --repository=http://ctan.mines-albi.fr/systems/texlive/tlnet
└────

and, as a side effect, I always use a safe (well, at least a known) one.
--
Denis
jfbu
2017-12-12 18:30:00 UTC
Permalink
Post by Michael Kallweitt
A few minutes ago, I updated my TexLive distro using "sudo tlmgr update
-self -all", when I noticed that something came in through a repository
(verified, though) that looks a little suspicious, "babyname.tips".
Can anyone confirm that this is a legitimate repo?
,----
| tlmgr: package repository http://ftp.uni-erlangen.de/ctan/systems/texlive/tlnet (verified)
| tlmgr: saving backups to /usr/local/texlive/2017/tlpkg/backups
| [1/1, ??:??/??:??] update: texlive.infra [372k] (45888 -> 46048) ... done
| Restarting tlmgr to complete update ...
| tlmgr: package repository http://babyname.tips/mirrors/ctan/systems/texlive/tlnet (verified)
| tlmgr: saving backups to /usr/local/texlive/2017/tlpkg/backups
| [1/1, ??:??/??:??] update: texlive-scripts [118k] (45974 -> 46030) ... done
| running mktexlsr ...
| done running mktexlsr.
| running mtxrun --generate ...
| done running mtxrun --generate.
| tlmgr: package log updated: /usr/local/texlive/2017/texmf-var/web2c/tlmgr.log
`----
Hi,

it is listed officially there: https://ctan.org/mirrors

you appear to be safe ;-)

... except if that web site was hacked as well and cryptographic
verification was victim of an exploit ...

Jean-François
Peter Flynn
2017-12-12 22:03:44 UTC
Permalink
Post by Michael Kallweitt
A few minutes ago, I updated my TexLive distro using "sudo tlmgr update
-self -all", when I noticed that something came in through a repository
(verified, though) that looks a little suspicious, "babyname.tips".
Can anyone confirm that this is a legitimate repo?
,----
| tlmgr: package repository
http://ftp.uni-erlangen.de/ctan/systems/texlive/tlnet (verified)
| tlmgr: saving backups to /usr/local/texlive/2017/tlpkg/backups
| [1/1, ??:??/??:??] update: texlive.infra [372k] (45888 -> 46048) ... done
| Restarting tlmgr to complete update ...
| tlmgr: package repository
http://babyname.tips/mirrors/ctan/systems/texlive/tlnet (verified)
| tlmgr: saving backups to /usr/local/texlive/2017/tlpkg/backups
| [1/1, ??:??/??:??] update: texlive-scripts [118k] (45974 -> 46030) ... done
| running mktexlsr ...
| done running mktexlsr.
| running mtxrun --generate ...
| done running mtxrun --generate.
/usr/local/texlive/2017/texmf-var/web2c/tlmgr.log
`----
Hi,
it is listed officially  there: https://ctan.org/mirrors
you appear to be safe ;-)
... except if that web site was hacked as well and cryptographic
verification was victim of an exploit ...
The site itself appears to be genuine, except that the owner is hiding
behind an anonymous domain registrar, and appears to be offering a
fairly worthless database of baby names (read their home page).

Why they have repos for 17 systems, including Mint, Exim, and GNU, is
anyone's guess. I suspect it is a vanity site rather than a danger.

///Peter

Loading...